Wireless and Edge Infrastructure Cybersecurity Engineer

What you'll do

• Harden GPU-accelerated servers, network switches, radio units, and Kubernetes layers against threats.
• Apply and verify defense STIGs and CIS benchmarks on Ubuntu hosts and network devices.
• Design and implement network segmentation, VLAN isolation, and TLS for management interfaces.
• Build and operate vulnerability management programs using Nessus or ACAS for hosts and containers.
• Perform security assessments and protocol analysis of wireless components using Wireshark and system logs.
• Prepare RMF artifacts and documentation to support the Authority to Operate (ATO) process.
• Manage identity, credentials, and secrets including PKI, certificates, and SSH keys.
• Define shipping and field security postures for systems deployed at government sites.

What we're looking for

• Bachelor's degree in CS, Cybersecurity, Electrical Engineering, or Computer Engineering and 5+ years of cybersecurity engineering experience.
• 9+ years of cybersecurity engineering experience in lieu of a degree.
• Ability to obtain a Secret clearance.
• Ability to obtain a Security+ CE or DoD Baseline Certification within 6 months of start date.
• Experience hardening Linux systems to STIG or CIS benchmarks, including evidence collection and remediation.
• Experience securing virtualized and containerized environments, including Kubernetes, Docker, and hypervisors such as Proxmox, VMware, or KVM.
• Experience with network security on Layer 2 or Layer 3 infrastructure, including VLAN segmentation, ACLs, 802.1X, firewalls, and TLS or PKI.
• Experience with the DoD Risk Management Framework (RMF), NIST SP 800-53 controls, and preparing artifacts for an ATO.
• Experience with vulnerability scanning and management tools such as Nessus or ACAS.
• Ability to read packet captures via Wireshark or tcpdump and interpret system logs to investigate security issues.
• Experience securing wireless or cellular infrastructure, including radio access networks, packet cores, or private LTE or 5G systems (preferred).
• Experience with open RAN architectures and the security guidance published for them (preferred).
• Experience with Zero Trust architectures, NAC platforms, or SIEM or log analytics platforms (preferred).
• Experience securing GPU-accelerated or edge AI platforms (preferred).
• Experience with precision timing security, security automation, or SIM/eSIM provisioning security (preferred).
• Experience supporting DoD research, test, or evaluation programs (preferred).
• Experience with CBRS or SAS, or federal spectrum coordination (preferred).
• Possession of excellent written and verbal communication skills (preferred).
• Secret clearance (preferred).
• CISSP, CCSP, GICSP, or Certified Kubernetes Security (CKS) Certification (preferred).